All Projects

A fullstack DevOps project for a demo radiology platform where medical imaging studies are received, anonymized, stored, analyzed with AI, and monitored through a complete containerized environment.

• Built a local Docker Compose stack with Orthanc, PostgreSQL, MinIO, FastAPI, AI inference, Prometheus, and Grafana
• Implemented a DICOM pipeline for metadata extraction, anonymization, preview generation, and upload to S3-compatible object storage
• Developed a FastAPI backend API and dashboard for studies, image viewing, AI results, audit events, and operational links
• Integrated a separate AI inference service with TorchXRayVision DenseNet121 for chest X-ray findings, confidence scores, and heatmap generation
• Stored AI results, metadata, and audit logs in PostgreSQL for traceability and history
• Built a demo workflow for radiographer upload and doctor review with automated AI processing
• Added Prometheus metrics and Grafana dashboards for both the API and AI service
• Implemented backup and restore flows for PostgreSQL, MinIO, and Orthanc
• Verified CI with GitHub Actions through real push, pull request, and merge workflows
• Deployed the platform across three Hetzner VPS nodes for app, data/imaging, and monitoring, using a private network and one Docker Compose setup per node

A full-stack DevOps project for a demo radiology worklist application, built with React, Node.js, Express, and MongoDB. The application was first containerized with Docker Compose and then deployed to a real Kubernetes cluster across three VPS instances, including persistent storage, NodePort access, pod self-healing, node drain testing, and cluster visualization with Lens.

• Built a React frontend for viewing, adding, and deleting demo imaging cases
• Built a Node.js and Express backend API connected to MongoDB
• Containerized the frontend, backend, and database with Docker Compose
• Wrote Kubernetes manifests for the frontend, backend, MongoDB, services, and persistent storage
• Deployed the application to a three-node Kubernetes cluster on VPS infrastructure
• Demonstrated Kubernetes self-healing by deleting pods and observing automatic replacement
• Simulated node failure with node drain and verified pod rescheduling
• Used Lens to visually inspect pods, services, logs, and deployments across the cluster

A Jenkins-driven CI pipeline for a Maven Java application, with GitHub triggers, automated tests, SonarQube quality gates, and Nexus artifact publishing on separate AWS EC2 hosts.

• Built a Jenkins pipeline triggered from GitHub changes
• Compiled and tested a Maven Java application automatically
• Integrated SonarQube for code quality checks and quality gate validation
• Published build artifacts to Nexus Repository
• Used separate AWS EC2 instances for Jenkins, SonarQube, and Nexus
• Demonstrated a full CI workflow from code push to artifact storage

A simple Flask notes application featuring containerization, automated testing, and deployment to a Hetzner VPS.

• Create and delete notes through a simple web interface
• Store notes in a PostgreSQL database
• Run the app and database together with Docker Compose
• Test the project automatically with GitHub Actions CI
• Deploy automatically to a Hetzner VPS with GitHub Actions over SSH
• Demonstrates a full workflow from code push to test and deployment

A Node.js application demonstrating practical integration with the OpenAI Responses API - covering authenticated requests, parameter tuning, conversation memory, and real-time streaming.

• Built an authenticated client for the OpenAI Responses API
• Sent requests and parsed responses, including token usage and metadata
• Tuned output behavior using temperature and max_output_tokens
• Maintained conversation context across multiple calls using response IDs
• Implemented real-time streaming of model output, token by token
• Secured API credentials using environment variables, excluded from version control

A complete enterprise network designed and implemented in Cisco Packet Tracer and Cisco Modeling Labs, covering routing, switching, security, VPN, and high availability for a fictional medical company with HQ and branch sites.

• Designed a dual-ISP, dual-firewall HQ architecture with full redundancy
• Configured OSPF routing and HSRP gateway redundancy across all VLANs at both sites
• Implemented IPsec site-to-site VPN between HQ and branch office
• Set up VLAN segmentation with 802.1Q trunking across 9 departments
• Deployed WLC-managed wireless network with CAPWAP lightweight APs
• Verified full connectivity - all tests passed across HQ, branch, DMZ, and VPN

A Java desktop application for viewing, filtering, and analyzing log files. It helps users understand system activity through structured filtering, visualization, and reporting.

• Load and analyze structured log files
• Filter logs by date, time, level, source, user, and IP
• Visualize logs with charts for activity over time, level distribution, and top sources
• Add notes to log entries for tracking and review
• Export reports in Text, JSON, and CSV formats
• Includes a simple authentication system with predefined users

A Flask application for exploring and analyzing Swedish job listings using the JobTech API, with filtering, visualization, and optional email summaries.

• Fetch and display job listings from the JobTech public API
• Filter jobs by keywords, location, and attributes
• View results in a structured table format
• Visualize job distribution by city using charts
• Optional email summary feature using SendGrid or SMTP
• Includes test suite with mocked API interactions

A full-stack Flask web application for browsing and purchasing laptops, featuring a complete shopping flow and an admin management system.

• Browse products and view detailed laptop pages
• Add to cart and complete a simple checkout process
• Admin dashboard for managing products, orders, and payments
• Clean, responsive UI with structured backend architecture

A minimal Django portfolio template designed to showcase profile, experience, projects, and articles with both overview sections and dedicated pages.

• Structured layout with main sections and separate pages for deeper content
• Designed for easy content editing and reuse via configuration
• Clean and minimal interface focused on readability
• Supports linking to external resources like PDF résumé and project details

A Microsoft 365 administration lab for a fictional medical technology company, built end-to-end from business requirements into a structured tenant - covering identity, licensing, Teams, SharePoint, Exchange Online, security review, and documented admin workflows.

• Prepared a PowerShell environment with Microsoft Graph, Exchange Online, Teams, and PnP modules; captured the tenant baseline before any configuration changes
• Created staff, admin-only, and break-glass accounts from CSV data; assigned Microsoft 365 Business Basic licenses and documented limitations
• Configured Microsoft 365 groups, security groups, distribution lists, and shared mailboxes
• Built Teams workspaces and channels for departments and branches; configured SharePoint sites with group-based permissions and external sharing disabled
• Added Exchange Online mail flow rules for external sender warnings and risky attachment blocking; reviewed Security Defaults, Service Health, and guest access settings
• Tested onboarding, offboarding, mailbox cleanup, session revocation, and incident response workflows; exported the final tenant configuration as documented evidence

A production-style Windows Server environment simulating a secure enterprise infrastructure, focused on Active Directory design, access control, and system management best practices.

• Deploy and configure Active Directory domain (corp.local)
• Design structured OU hierarchy for Lund and Stockholm locations
• Implement Group Policy for user and computer management
• Configure DNS with forwarders and conditional forwarding
• Set up centralized file server with NTFS and share permissions
• Apply RBAC using AGDLP model (no direct user permissions)
• Delegate administration using security groups
• Automate bulk user creation with PowerShell
• Deploy printers via Group Policy
• Enforce security policies including restricted environments and admin controls